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LIST OF PENDING CLAIMS 

1 . (Previously presented) A method of authenticating an electronic device, the electronic 
device having device specific identifying data stored therein, the method 

comprising: 

issuing a plurality of random challenges to the electronic device and receiving a 
plurality of responses from the electronic device, wherein each random challenge and 
corresponding response represents a challenge response pair which is unique and based upon 
specific identifying data of the electronic device; 

obtaining one of the challenge response pairs associated with the electronic 

device, 

communicating a challenge portion of the challenge response pair to the 
electronic device; 

receiving from the electronic device a response to the challenge portion, wherein 
the response being based upon the device specific identifying information; 

comparing the response to a response portion of the challenge response pair; and 
authenticating the user if the response matches. 

2. (Previously presented) The method of claim 1 , wherein the step of obtaining one of the 
challenge response pairs comprises obtaining from a database store of challenge response pairs 
the challenge response pair. 

3. Cancelled. 

4. (Original) The method of claim 1, wherein the step of obtaining a challenge response 
pair comprises obtaining a challenge response pair from a challenge response pair broker. 

5. (Original) The method of claim 1, wherein the device specific identifying data comprises 
data stored on a subscriber identity module (SIM) card associated with the electronic device, or 
computed by the SIM card upon demand. 
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6. (Original) The method of claim 1 , comprising the step of discarding the challenge 
response pair after use. 

7. (Original) The method of claim 1, wherein the step of obtaining a challenge response 
pair comprises obtaining via a secure communication interface the challenge response pair. 

8. (Previously presented) A system for device authentication comprising: 

an agent for interrogating an electronic device to obtain at least one challenge response 
pair through issuance of a plurality of random challenges to the electronic device and receiving a 
plurality of responses from the electronic device, wherein each random challenge and 
corresponding response represents a challenge response pair which is unique and based upon 
device specific identifying data retained within the electronic device; 

a memory for storing the challenge response pair; and 

an agent for providing the challenge response pair from the memory to a user which 
authenticates an electronic device by communicating a challenge portion of the challenge 
response pair to the electronic device, receiving from the electronic device a response to the 
challenge portion, wherein the response being based upon the device specific identifying 
information, comparing- the response to a response portion of the challenge response pair; and 
authenticating- the user if the response matches. 

9. (Original) The system of claim 8, wherein the device specific identifying data comprises 
subscribed identity module (SIM) card data from a SIM card within the electronic device. 

10. (Original) The system of claim 9, wherein the user comprises a service provider having a 
need to authenticate the electronic device. 

1 1 . (Original) The system of claim 10, wherein the agent for interrogating and the agent for 
providing are associated with the service provider. 
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12. Cancelled. 

13. (Original) The system of claim 8, wherein the agent for providing the challenge response 
pair comprises a challenge response pair broker. 

14. (Previously presented) A method of providing an authentication service comprising the 
steps of: 

obtaining from an electronic device a plurality of challenge response pairs through 
issuance of a plurality of random challenges to the electronic device and receiving a plurality of 
responses from the electronic device, wherein each random challenge and corresponding 
response represents a challenge response pair which is unique and based upon the challenge and 
device specific identifying data associated with the electronic device; 

storing the challenge response pairs; and 

providing responsive to a request for an authentication service a challenge response pair 
to a service provider for authenticating the electronic device by communicating- a challenge 
portion of the challenge response pair to the electronic device, receiving from the electronic 
device a response to the challenge portion, wherein the response being based upon the device 
specific identifying information, comparing the response from the electronic device to a response 
portion of the challenge response pair; and 

authenticating the user if the response matches.. 

15. (Original) The method of claim 14, wherein the step of obtaining from an 
electronic device a plurality of challenge response pairs comprises generating from a 
subscribed identify module (SIM) card a plurality of challenge response pairs and 
providing the SIM card to a user of the electronic device. 
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16. (Original) The method of claim 14, wherein the step of providing response to a 
request for an authentication service a challenge response pair comprises vending the 
challenge response pair. 

17. (Original) The method of claim 14, wherein the step of providing response to a 
request for an authentication service a challenge response pair comprises securely 
communicating the challenge response pair to the service provider. 
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